This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
File:                     3EThniu05wI8wboQ1Jt07eS_hlw.mft (raw, json)
Hash identifier:          tekKQI+3dlgHKvHgL4te84cdocpe3Av3gFjmwPLF+kc=
Subject key identifier:   E7:AC:B7:47:D5:09:02:AF:98:0B:95:B4:96:D4:D9:F4:87:BA:BB:22
Authority key identifier: DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
Certificate issuer:       /CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Certificate serial:       019B432507FA625F270AC2B8B59248600F14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
Manifest number:          10E9
Signing time:             Sun 21 Dec 2025 23:00:58 +0000
Manifest this update:     Sun 21 Dec 2025 23:00:58 +0000
Manifest next update:     Mon 22 Dec 2025 23:00:58 +0000
Files and hashes:         1: 3EThniu05wI8wboQ1Jt07eS_hlw.crl (hash: 5DWwLCsCJk6iM5KOb0o89h7uX1aCs4mcLu3jHrZHWxA=)
                          2: NO2hwXxk6AiYVNho9DdnmakKibo.roa (hash: KjRA6xm9G+dFvFvEr1pRfwpBhmr4/09q+ZWaH5ApdDY=)
                          3: On6R4nNTZ0YYv_0GBGytm6COqe8.roa (hash: bNbiiOOyNE6FHV7YY8Nd3d02QHZTqUZthKpv3jqVHn4=)
                          4: _UiUxv0oU2Vs8vl9aQlqGT-rguM.roa (hash: EibngS/6U5WbywdZke7WcdMlnrfByt82mvGn2UMi818=)
                          5: qnHwx7ZjqkHGMQ3UL_6iH_ZiPZ0.roa (hash: v6x8FXcAuZgdOrpOuZAffsHlmhE2j1MwJFDVe05keHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:43:25:07:fa:62:5f:27:0a:c2:b8:b5:92:48:60:0f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
        Validity
            Not Before: Dec 21 23:00:58 2025 GMT
            Not After : Dec 22 23:00:58 2025 GMT
        Subject: CN=e7acb747d50902af980b95b496d4d9f487babb22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c2:6a:2f:42:f5:a9:d4:b4:8b:1f:b1:50:97:
                    a3:53:1d:ac:39:f5:36:65:56:4f:dc:a3:f8:84:81:
                    58:71:8f:e9:10:16:0d:83:50:34:9f:f6:73:9c:e9:
                    d2:ba:d4:03:66:a2:fe:af:f2:8c:47:f1:02:20:36:
                    80:54:ef:4a:7e:d8:6d:60:68:42:db:f3:09:92:fa:
                    0b:76:14:d1:a4:fe:30:4b:49:79:3d:b9:7a:46:7d:
                    5c:0a:e2:07:b7:bd:83:0d:ad:ed:aa:41:87:89:dc:
                    31:e3:ac:64:1e:57:cb:21:40:34:0f:3d:71:ba:e1:
                    03:98:85:e9:5d:25:84:e9:c1:2e:73:f6:a6:ff:1e:
                    a1:5a:a2:ba:fa:b3:4e:8c:63:f1:34:48:ca:53:5e:
                    e4:2a:f6:06:a2:cb:61:35:73:15:87:0f:81:f7:2f:
                    f7:4e:11:a2:fb:a6:94:c4:54:bf:82:51:5a:57:a4:
                    50:15:4d:2e:fc:c0:c4:b2:4b:49:83:2a:c6:f8:c1:
                    7d:e3:67:aa:fd:0c:7b:8e:6d:c9:2a:3a:bb:15:7c:
                    c7:08:45:c6:78:ea:6c:1f:cb:ff:03:aa:77:40:85:
                    4e:94:b6:26:60:c7:96:99:77:93:11:1c:0d:6f:1a:
                    30:27:26:ac:ae:9d:aa:2f:65:43:ef:0e:eb:05:3b:
                    55:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AC:B7:47:D5:09:02:AF:98:0B:95:B4:96:D4:D9:F4:87:BA:BB:22
            X509v3 Authority Key Identifier:
                keyid:DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:25:94:2d:c1:04:29:61:bd:02:d6:58:f2:6f:2a:18:e3:e6:
         89:3a:be:4a:10:73:f1:3a:e5:12:0b:97:56:1f:6d:54:b8:75:
         06:e3:68:f4:da:76:30:61:a9:6c:ae:27:42:73:a1:7f:f1:3e:
         6e:d2:95:00:cb:bf:07:bd:fa:f8:48:c4:5e:de:14:00:61:01:
         f7:79:62:2e:2c:b2:9b:97:40:2f:c8:11:05:78:e4:10:e6:75:
         53:a5:e6:48:9f:76:4a:4f:a3:e7:0e:bb:6b:48:b5:fd:54:9d:
         5b:ff:a6:a2:75:ee:45:e4:b1:94:6a:72:29:fb:a7:05:02:e1:
         6e:3e:36:05:71:60:b6:a1:ba:1a:5a:d2:79:f3:5e:15:7e:31:
         ad:db:e1:15:f2:d9:36:25:f5:cf:85:36:67:4f:e8:9b:ca:ae:
         e4:4c:d3:90:fc:0f:70:09:29:77:4e:e0:1a:cc:45:a9:43:e4:
         50:06:c2:d5:7f:14:30:b7:94:2a:79:50:f0:04:82:c0:ab:57:
         51:d9:11:0c:16:87:0e:e6:2d:1e:7b:d6:8c:f9:d2:69:3c:a4:
         b4:cb:01:c0:9f:89:bf:2c:54:85:e7:d6:46:59:a6:8b:8b:3d:
         43:e2:7e:42:ea:7b:b7:6f:89:76:f1:4b:90:5f:b4:ad:68:60:
         67:92:d5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 06:55:30 2025 by rpki-client